Forgot to verify signature of .asc file before verifying checksum

[DavidHoude]

Forgot to verify sig of *.asc against pubkey before verifying checksum, added.